Dead.Letter-CVE-2026-45185

CVE-2026-45185 — "Dead.Letter" Exim Vulnerability Scanner A shell script for detecting whether a Linux system is vulnerable to CVE-2026-45185, a use-after-free in the Exim mail transfer agent that can lead to remote code execution. Designed for use in CI/CD pipelines, configuration management...

cve-2021-41773-exploration

Overview CVE-2021-41773 is a path traversal vulnerability discovered in Apache HTTP Server 2.4.49 in October 2021. The root cause was a failure to properly normalize dot sequences ended into the URL before checking whether requested path stayed within the web root. This vulnerability allowed an...

CVE-2024-23692

Rejetto HTTP File Server HFS Unauthorized RCE Vulnerability Reproduction CVE-2024-23692 Introduction Rejetto HTTP File Server HFS is a lightweight HTTP file server widely used for file sharing and file transfer. CVE-2024-23692 is a template injection vulnerability that allows a remote,...

CVE-2025-53770

CVE-2025-53770 SharePoint Description The deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code remotely and compromise the system. Microsoft is aware of active exploitation and is preparing a comprehensive update. Ensure that mitigations...

AutoIt-Obfuscator

AutoIt Obfuscator — Obfuscation for AutoIt Script Source Code AutoIt Obfuscator is a tool to modify AutoIt script source code in this way to make an analysis of obfuscated code very difficult. More technical details, downloads, documentation available at:...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.0 RCE vulnerability This is a script to exploit CVE-2017-5638 - It allows an attacker to inject OS commands into a web application through the content-type header Apache Struts 2 is an open-source web application framework for developing Java EE web applications. It...

CVE-2024-32002-git-rce-father-poc

This repository does not have a README...

cve-2020-27955

cve-2020-27955 cve-2020-27955 Reproduction 1. Create a GitHub repository 2. git clone https://github.com/attacker/poc.git . 3. echo calc.exe git.cmd 4. git lfs track “.dat” 5. echo “Junk” large.dat 6. git add -A 7. git commit -m “POC” 8. git push -u origin master -f...

CVE-2024-42845-Exploit

CVE-2024-42845: Remote Code Execution RCE in Invesalius 3.1 Exploit Details Exploit Title : Invesalius 3.1 - Remote Code Execution RCE Discovered By : Alessio Romano sfoffo, Riccardo Degli Esposti partywave Exploit Author : Alessio Romano sfoffo, Riccardo Degli Esposti partywave Date : 2024-08-23...

CVE-2022-46169-Cacti-v1.2.22-RCE

CVE-2022-46169-Cacti-v1.2.22...

CVE-2023-46604_ActiveMQ_RCE_Recurrence

Enter activemq/bin, select x64 or x32, and run activemq.bin with administrator privileges. Access admin at port 8161, admin/admin If it cannot be started, check whether the port is occupied and modify activemq.xml in conf. In my machine, the MQTT port was occupied, so I modified it. 2. Start an...

checkmk_broccoli2shell

checkmkbroccoli2shell A Checkmk extension that shows, for every Brotli decoder on a Linux host, whether it is affected by Broccoli2Shell - CVE-2026-111497 , an out-of-bounds write in Google's C Brotli decoder that can lead to remote code execution when a program decompresses Brotli data from an...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ Classic RCE via Jolokia API TL;DR A remote code execution vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary code by invoking the addNetworkConnectorString MBean operation through the Jolokia API /api/jolokia/. The attacker embed...

ppsx-file-generator

Introduction By Temesgen Yibeltal [email protected] Based on code by https://github.com/bhdresh/CVE-2017-8570 now removed ppsx-file-generator is a python tool that generates a power point slide show file that executes code from a remote source based on an existing file. What does it do? The...

CVE-2022-26134

CVE-2022-26134 PoC Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability PoC Severity Atlassian rates the severity level of this vulnerability as critical, according to the scale published in Atlassian severity levels. All...

Satellian-CVE-2020-7980

Satellian-CVE-2020-7980 Satellian is a PoC script that shows RCE vulnerability over Intellian Satellite controller Intellian Aptus Web. The following script will try to list all the binaries in the system and afterwards will allow the tester to interact directly with the server usually as root. P...

Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution

Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution Script that exploits the vulnerability that allows remote code execution in Ruby 2.3.8 ​​with CVE-2016-2098 Usage ./RubyOnRailsActionPackInlineERB-RemoteCodeExecution.py -h --target-host TARGETHOST --port PORT --target-uri TARGETURI...

CVE-2022-3552

CVE-2022-3552 In order to exploit the vulnerability in BoxBlilling, the version will have to be: "BoxBilling=4.22.1.5" and you will have to have valid admin credentials. If you have the situation above, here are the steps you have to take in order to get the juicy RCE: Create a python virtual...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Remote Code Execution RCE CVE-2021-4045 🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras = v1.1.16 Build 211209" 🔓 Read about the exploit from exploit db This is a command injection vulnerability that affect all TP-Link Tapo c200 camera firmware...

CVE-2022-22965-poc

CVE-2022-22965 poc CVE-2022-22965 poc including reverse-shell and password support. Feel free to add more stuff : How to test? $ docker run -p 9090:8080 vulfocus/spring-core-rce-2022-03-29 run vulnerable docker $ python3 exploit.py -c id --password 1234 --shellname big0us $ python3 exploit.py...